1. Core Philosophy 1. 隐私核心理念
Stoma Gas & Sound Log is built from the ground up as a Local-First, Offline-First app. Unlike traditional health trackers, we do not deploy backend cloud databases, tracking analytics, or remote logging services. Every metric you track exists in complete isolation inside your iOS sandbox.
Stoma Gas & Sound Log（造口排气与排便记录）从零构建，核心采用本地优先、离线优先的隐私理念。与常规需要联网注册的健康追踪软件不同，我们不部署任何后端云端数据库、追踪分析器或远程日志分析服务器。您记录的每一条造口活动指标都隔离存储在您 iOS 系统的安全沙盒中。
Visualized Privacy Data Path
可视化隐私数据流向
Your health entries pass through zero intermediaries. From user input directly to sandboxed database files.
您的健康记录数据流不经过任何中转，直接由用户界面存入设备内置的加密数据库中。
2. Data Collection & Processing 2. 数据收集与处理细则
We believe in absolute data minimization. The table below outlines what data you record, where it goes, and who has access to it:
我们坚持极简数据主义。下表罗列了您在应用内记录的所有健康字段，其存储目的地以及任何第三方的访问权限：
| Data Category 数据类别 | Specific Data Elements 具体数据字段 | Access Level 访问权限 |
|---|---|---|
| Gas Sound Logs 造口排气日志 | Local audio recordings (`.m4a` format), volume levels (Loud, Soft, Silent), and exact duration. 本地音频录像（`.m4a` 格式）、声音响度等级（响、轻、无声）以及录音总时长。 | 100% Offline Only 100% 仅限离线 |
| Bowel Movements 排便性状与量 | Stool consistency ratings (Liquid, Loose, Formed), volume output estimate (Small, Medium, Large), and custom text notes. 大便性状（水样、稀软、成形）、输出量估算（量少、中等、量多）以及自定义文字备注。 | 100% Offline Only 100% 仅限离线 |
| Leakage Warnings 底盘渗漏预警 | Precursor flags (skin itching, pouch bloating, baseplate tension, or other anomalies) tracked to help predict patterns. 渗漏预警前兆标志（如皮肤瘙痒、胀袋、底盘拉扯感等身体异样）用于趋势预测分析。 | 100% Offline Only 100% 仅限离线 |
| Dietary Records 日常膳食记录 | Meal categories (Breakfast, Lunch, Dinner, Snack) and meals metadata to help cross-reference stoma activity. 餐食类别（早餐、午餐、晚餐、零食）和膳食细节，用于对照造口反应。 | 100% Offline Only 100% 仅限离线 |
3. Device Permissions & System Access 3. 系统权限调用说明
To record and log gas activity, the app requests the following system privileges. You can modify these settings inside the iOS Settings app at any time:
为实现排气声音记录功能，本应用会在使用过程中申请调用以下系统权限。您可以随时在 iOS “设置”应用中撤销或调整权限许可：
Purpose: Required exclusively to capture audio files when you tap the "Record Sound" button in the app. The recording stream is processed entirely on-device.
Privacy Guarantee: The app never listens in the background, never records unless you press the record button, and stores files locally in the `Documents/Recordings/` sandbox.
使用目的： 仅在您明确在界面点击“录制声音”按钮时启动音频采集。录制处理完全由本设备完成。
隐私承诺： 本应用绝对不会在后台暗中监听，只有在您手动发起录音时才会请求系统麦克风。所有音频均直接写入并保存在本地应用沙盒中的 `Documents/Recordings/` 目录下。
Purpose: Accesses directories inside the app package sandbox to read, write, and delete `.m4a` files and database records.
Privacy Guarantee: Does not require access to your global Photo Library, Contacts, or external Apple ID profile folders.
使用目的： 在本应用专门的沙盒目录中读写、回放以及删除 `.m4a` 音频文件和 SwiftData 本地数据库数据。
隐私承诺： 本应用绝不申请访问您的全局系统相册、手机通讯录或 iCloud 个人主账户文件夹。
4. Sandbox Security & Encryption 4. 数据沙盒安全与物理加密
Because stoma tracking happens on-device, your data inherits Apple's built-in iOS security features:
鉴于所有的造口追踪均在设备端运行，您的健康数据将自动继承 Apple iOS 系统的底层安全加固特性：
iOS Sandboxing
iOS 沙盒机制
Other third-party apps on your phone cannot read files inside Stoma Gas & Sound Log's directories.
您手机上的其他第三方 App 均无权跨沙盒读取本应用存储的文件或日志数据库。
Device Encryption
硬件级数据加密
Data is automatically encrypted while the device is locked, protected by Apple's Secure Enclave.
当您的设备锁定或关机时，沙盒数据通过硬件级密钥自动加密，确保设备丢失后的安全。
5. Payment Security & Subscription Data 5. 订阅与支付安全
Stoma Gas & Sound Log offers an optional Premium membership (e.g., product `com.stomagash.log.premium.monthly`) which is processed exclusively via Apple StoreKit.
本应用提供可选的 Premium 高级版订阅服务（例如商品代号 `com.stomagash.log.premium.monthly`），该交易完全经由 Apple StoreKit 系统进行处理。
We do not operate backend payment billing systems. Payment verification is done on-device via StoreKit 2 APIs. We never receive or store your credit card information, bank account numbers, or billing addresses.
我们完全不需要搭建或运营任何后端收银系统。所有的账单校验都直接由设备端的 StoreKit 2 API 处理。开发者无权也无法获取您的信用卡卡号、银行账户及账单寄送地址。
6. Data Retention & Deletion Rights 6. 存储期限与删除权力
Since all data is stored strictly on your local device, you maintain 100% physical custody and deletion rights:
鉴于所有的造口追踪数据都存储于您的本地设备上，您拥有完全的数据控制权与绝对的删除权：
You can delete any single gas log entry or bowel movement log within the app by swiping left or selecting "Delete". This actions the local SQLite/SwiftData repository to permanently purge the record and erase any associated `.m4a` file from your device storage instantly.
您可以在 App 中通过向左滑动或选择“删除”来移除任何单条排气录音或排便记录。该操作会直接在底层的 SwiftData 本地数据库中彻底抹除对应的记录，并立即从物理存储中永久删除关联的 `.m4a` 录音文件。
To remove all stoma logs, database instances, configuration files, and sound clips, simply uninstall the app from your iOS device. When you tap "Delete App" on iOS, the system automatically wipes the sandbox container clean, leaving no trace behind.
如需一次性永久销毁本应用的所有记录、数据库、参数配置文件和录音，您只需将本应用从您的 iOS 设备中卸载。在您轻按 iOS “删除 App” 的同时，系统会自动将该应用的本地沙盒容器彻底格式化清空，不留任何数据痕迹。
7. Frequently Asked Questions 7. 常见隐私安全疑问
By default, the SwiftData containers and recordings folder inside the Sandbox are stored on your device storage. They will only be backed up to iCloud if you have whole-device iCloud Backups enabled in your iOS system settings.
本应用默认将 SwiftData 容器和 recordings 音频目录存放在您的本机器身空间上。只有在您启用了 iOS 系统的全局设备“iCloud 云备份”时，这些本地文件才会在系统例行备份期间安全备份到您个人的 iCloud 账户中。
No. Because there are no backend web servers or telemetry databases connected to the app, the developer (and any third parties) has absolutely zero ability to access, upload, or listen to any audio files recorded.
不可能。因为本应用没有接入任何云端服务器或遥测日志，所以开发者（以及任何第三方）绝对没有任何技术手段可以访问、窃听或调取您的任何录音。
If you have any questions about this privacy statement, you can submit inquiries directly through our App Store page support link, or email: support@stomagash.com.
如果您对本隐私政策有任何疑问，您可以通过 App Store 页面的技术支持链接反馈，或直接发送邮件至：support@stomagash.com。